Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix multiple security issues are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Ubuntu: Security Advisory (USN-2342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2342-1: QEMU vulnerabilities

Michael S. Tsirkin, Anthony Liguori, and Michael Roth discovered multiple issues with QEMU state loading after migration. An attacker able to modify the state data could use these issues to cause a denial of service, or possibly execute arbitrary code. CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,...

RedHat Update for qemu-kvm RHSA-2014:0927-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : qemu-kvm (ELSA-2014-0927)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0927 advisory. - Resolves: bz1095782 CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid configlen rhel-7.0.z -...

qemu-kvm security and bug fix update

1.5.3-60.el70.5 - kvm-Allow-mismatched-virtio-config-len.patch bz1095782 - Resolves: bz1095782 CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid configlen rhel-7.0.z 1.5.3-60.el70.4 - kvm-zero-initialize-KVMSETGSIROUTING-input.patch bz1110693 -...

CVE-2011-4149

...

CVE-2011-4149

CVE-2011-4149 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Adobe Acrobat and Reader Invalid Value Code Execution (APSB12-16; CVE-2012-4149)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader...

Adobe Acrobat Multiple Vulnerabilities - Windows

This host is installed with Adobe Acrobats and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnaug12win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Multiple Vulnerabilities - Windows Authors: Thanga Prakash S Copyright: Copyright c 2013...

Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...

Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities : - An unspecified stack-based buffer overflow condition exists that allows an attacker to execute arbitrary code. CVE-2012-2049 - An...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4149, CVE-2012-4150,...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150,...

CVE-2012-4149

CVE-2012-4149 affects Adobe Reader and Acrobat prior to 9.5.2 (9.x) and 10.x prior to 10.1.4 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption through unspecified vectors, distinct from other CVEs in the same family. The connected documents corroborate a...

FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability

This host is installed with Fresh FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfreshftpclientdirtraversalvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

CVE-2010-4149

CVE-2010-4149 concerns FreshWebMaster Fresh FTP prior to or around 5.37, where a directory traversal flaw allows an FTP server to cause the client to write arbitrary files by using a ..\ pattern in the filename. The root cause is insufficient sanitization of the downloaded filename, enabling trav...

CA20091208-01: Security Notice for CA Service Desk

-----BEGIN PGP SIGNED MESSAGE----- CA20091208-01: Security Notice for CA Service Desk Issued: December 8, 2009 CA's support is alerting customers to a security risk with CA Service Desk. A cross-site scripting vulnerability exists that can allow a remote attacker to potentially gain sensitive...